“Framing as a procedural administrative response to a data breach, lacking sensationalist language or human victim details.”